Privacy notice.
Controller and scope
The controller is Ignacio Amyad Raduan Munem, Im Gütsch 6, 8122 Binz, Switzerland. Contact for privacy enquiries: office@raduan.ch.
This notice concerns website visits, initial enquiries and administrative coordination. Processing of medical records during an engagement requires separate information about the agreed secure channels and recordkeeping.
This notice addresses the Swiss Federal Act on Data Protection and, where applicable, the European General Data Protection Regulation.
Details collected through the website
The enquiry form asks for your name, email address, country of residence and the engagement you are considering. You may add a sentence or two of general context, up to 280 characters.
Campaign codes in the page address can accompany an enquiry and are carried between pages. They are used to understand the source of the enquiry. The site does not use cookies or browser storage to retain those codes.
A hidden form field helps identify automated submissions. The form has no file-upload facility.
Medical information and urgent requests
The website is for identification and practical context only. It does not request medical information. Please do not enter symptoms, diagnoses, medication details, medical documents, test results or another person’s health information.
Medical documents are requested after a call through HIN Mail. Neither the website form nor WhatsApp is an emergency channel.
The website does not request medical information. If medical information is received in error through the form or WhatsApp, it is deleted and you are asked to send it again through HIN Mail.
Form delivery, hosting and email
The current implementation is prepared for hosting on Vercel. When configured, its serverless contact function receives the form submission and passes the enquiry to Resend, the transactional email provider.
The email contains the submitted name, email address, country, engagement, optional context and source codes. It is sent to the practice’s designated inbox, with your email address used for replies. Resend and the inbox provider may process the message and delivery information.
The function forwards the enquiry by email. The website code does not include a separate enquiry database. Copies can nevertheless remain in email systems, provider systems and technical records.
Website and function requests may produce technical records such as connection details, connection address, requested page and time. The current function also records delivery errors. The actual record contents, recipients and retention depend on the services as configured. A per-address request counter in the active function’s memory enforces a ten-minute rate-limit window. Expired counters are removed on a subsequent request or when the function instance ends. Counters are not shared between function instances.
Purposes and processing grounds
Enquiry details are used to respond, arrange a 20-minute call, assess the requested engagement and manage related correspondence. Technical information is used to operate the website and protect it from misuse.
Where the European regulation applies, the relevant grounds may include steps you request before entering an agreement, performance of that agreement, applicable legal obligations and legitimate interests in responding to enquiries and securing the website.
Submitting the form is not treated as blanket consent to unrelated uses or advertising. If a separate activity relies on consent, the purpose and withdrawal arrangements must be explained for that activity.
Recipients and international processing
Enquiries are intended for the physician and the service providers needed to host the website, deliver the message and operate the practice inbox. Data required by law may also need to be disclosed to an authorised recipient.
Depending on the selected services and their configuration, processing may take place outside Switzerland or the European Economic Area. The applicable requirements for international transfers must then be met.
The relevant provider entities, processing countries and transfer arrangements have not yet been confirmed for launch.
Plausible website measurement
Plausible is the sole planned analytics service and is intended to operate without cookies. It provides aggregate information about website use. The site includes no advertising pixels, and fonts are hosted with the website.
Plausible is disabled in the current build. The form code does not send names, email addresses or enquiry contents to analytics.
Before analytics is activated, the practice must confirm the deployed configuration, information processed, retention and processing locations. Campaign codes must not contain personal or medical information.
Email and WhatsApp coordination
Practice email: office@raduan.ch. WhatsApp Business: +41 77 289 56 18. WhatsApp is a secondary channel for coordination only. You can contact the practice by email instead.
Please do not send medical records, results or urgent medical questions through either channel. Medical documents are requested after a call through HIN Mail.
Using WhatsApp involves its separate service provider and its processing of account and communication information. Encryption of messages does not remove every confidentiality or metadata risk. No WhatsApp widget is embedded in the website.
Retention
Administrative enquiry information is retained for as long as needed to answer the request and manage the resulting correspondence, subject to applicable recordkeeping obligations and the establishment, exercise or defence of legal claims.
When an enquiry does not lead to an engagement, administrative information is deleted once those purposes no longer require it. If an engagement begins, information needed for that engagement is handled under its recordkeeping rules.
The website does not request medical information. If medical information is received in error through the form or WhatsApp, it is deleted and you are asked to send it again through HIN Mail.
Technical logs, email copies, provider delivery records and medical records can require different retention arrangements. Deletion from one system does not necessarily remove copies from another. The accidental-receipt procedure therefore includes the systems in which the information was received.
Confidentiality and security
Access to enquiry information must be limited to the physician and authorised service providers for the purposes described here, subject to applicable confidentiality duties.
Appropriate technical and organisational safeguards must be maintained for the information handled. Ordinary email and WhatsApp are not substitutes for the agreed secure channel for medical records.
Family information and absences
Each adult retains control of their own information. The family history integrates only what each member authorises in writing. No adult receives automatic access to another adult’s records through family membership. Information concerning minors is governed by parental authority.
Absences are announced in advance. The route for urgent matters set out in the agreement also applies during absences.
Your rights and contact
Write to office@raduan.ch to request access to your personal information or its correction. Depending on the applicable law and circumstances, you may also request deletion, restriction or data portability, or object to processing.
If processing relies on your consent, you may withdraw that consent for the future. Applicable recordkeeping duties, confidentiality and the rights of others may limit a request. Any applicable limit should be explained.
Identity may need to be verified through an appropriate channel. Please do not send identity documents through the website.
You may contact the Swiss Federal Data Protection and Information Commissioner or, where the European regulation applies, the competent data protection supervisory authority.